Evidence Pack v1.2
A pack is an append-only sequence of blocks. Each block carries the hash of the one before it and an unkeyed SHA-256 integrity digest. Local checking detects inconsistent content; it does not authenticate the agent or any signer. No network or account is required.
{
"seq": 4182,
"id": "9f2c41d8…",
"prev": "e2a754b0…",
"ts": "2026-08-03T09:31:15+02:00",
"kind": "action",
"actor": "agent",
"summary": "mail.send observed at the boundary.",
"payload": {"agentId": "U-AGT-0007", "mandateId": "M-12"},
"integrityDigest": "41d808b1…",
"sealed": true
}
Every pack declares the coverage it was produced under. The value is content-bound, but this unkeyed format does not authenticate who emitted it. Gateway custody never claims to cover actions taken outside the gateway.
The integrity checker runs locally against the exported pack. If Ujex disappeared, exported packs would remain inspectable and their internal hashes could still be recomputed. Signer authenticity requires a separate signed manifest or attestation.
Start with the trust loop
- Give an agent papers.
- Run one approval-gated action.
- Export a content-addressed pack that another person can inspect and integrity-check offline.
Ujex links identity, mandates, approvals, custody and evidence. It is not a marketplace, checkout system, escrow service, browser fleet, GPU pool, recruiting tool, robotics stack, or agency.